An attacker scans domains, subdomains, IP ranges, DNS records, and Whois. What type of information is primarily extracted?

Which search engine tool lets an attacker use an image to query and track original sources and details of photos, profiles, and memes?

Which command allows an attacker with administrator privileges to hide any file or folder in a Windows system?

Which technique involves leveraging features of regularly used applications such as PDFs or Windows shortcut files (.lnk) to execute malicious commands?

Which Windows Service Manager (SrvMan) command is used to install and start a legacy driver with a single call?

Identify the malware analysis platform used to scan files, URLs, endpoints, and memory dumps, helping extract strings and identify their use in other files.

Which protocol allows a user’s workstation to access mail from a mailbox server and send mail from the workstation to the mailbox server via SMTP?

Which of the following is a generic exploit designed to perform advanced attacks against human elements to compromise a target to offer sensitive information?

In which of the following attacks does an attacker use a combination of volumetric, protocol, and application-layer attacks to take down a target system or service?

In which of the following session hijacking phases does an attacker break the connection to a victim's machine with knowledge of the next sequence number (NSN)?

Which attack abuses data compression in protocols like SSL/TLS, SPDY, and HTTPS to decrypt secret session cookies and hijack sessions?

Which technique manipulates the TCP/IP stack to slow worms and backdoors?

An attacker wants to perform a session hijacking attack. What tool should he use to achieve his objective?

One of the following is a clickjacking technique in which an attacker creates an iframe of 1 × 1 pixels containing malicious content placed secretly under the mouse cursor. When the user clicks on this cursor, it will be registered on a malicious page. Which is this clickjacking technique?